Hybrid SOC Security Analyst: Investigations & Response

Gartner; Stamford (CT); Hybrid; USD 64,000 - 87,000; Full time

Benefits offered by this job

Hybrid work environment

PTO days and holidays

Health, dental, and vision insurance

401K with corporate match

Employee Stock Purchase Plan

Tuition reimbursement

Job summary

Gartner Information Security is seeking a Security Analyst to strengthen our global Security Operations capability. You will investigate security events, support incident response, improve detection, and help protect Gartner’s people, data, and intellectual property.

This hands-on role requires technical curiosity, clear communication, and a drive to improve how a global SOC operates. The SOC operates 24x7 with rotating shifts across time zones.

Qualifications

• 2+ years of information security or security operations experience.
• Experience triaging and investigating cybersecurity events.
• Hands-on with SIEM/XDR for log analysis and detection development.
• Familiarity with cloud environments (AWS/Azure/GCP) and data querying.
• Experience with automation (Python/PowerShell/Bash).
• Strong communication, prioritization, and collaboration skills.
• Bachelor’s degree in cybersecurity or related field; certifications are advantageous.
• Willingness to work rotating shifts to support 24x7 SOC.

Responsibilities

• Triage and investigate security events from initial review to containment.
• Analyze evidence across SIEM, EDR, cloud, email, proxy, and network telemetry.
• Document investigations and communicate findings to technical teams and stakeholders.
• Contribute to detection content, workflows, and playbooks aligned with MITRE ATT&CK and Kill Chain.
• Develop practical tools and automation to reduce repetitive work.
• Hunt for suspicious behavior and misconfigurations across endpoints, network, and cloud.
• Collaborate with teams across geographies for timely, coordinated outcomes.
• Support continuous improvement of the global SOC and processes.

Skills

Security operations

Incident response

SIEM/XDR

Cloud security

Automation

Communication

Continuous learning

Certifications

Education

Bachelor’s degree in cybersecurity or related

Tools

SIEM

EDR

Web proxy/WAF

CSPM

IDS/NDR

SQL/KQL

Job description

Gartner Information Security is seeking a Security Analyst to strengthen our global Security Operations capability. You will investigate security events, support incident response, improve detection, and help protect Gartner’s people, data, and intellectual property.

This hands-on role requires technical curiosity, clear communication, and a drive to improve how a global SOC operates. The SOC operates 24x7 with rotating shifts across time zones.